Privacy policy

Our commitments in the protection of personal data

THE SCHOOL OF DIRECTORS AND CREATORS OF ENTERPRISES (EDC), association law 1901, exercising under the brand EDC Paris Business School, whose siret number is 402 499 933 0032 and whose declaration of activity is registered under number n ° 11 92 08 944 92 to the Prefect of Hauts de Seine, attaches great importance to the protection and security of your personal data, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 relating to the protection of individuals with regard to the processing of personal data and the free movement of such data and the Data Protection Act of 6 January 1978 as amended.

This Privacy Policy is addressed to any person as a user of the EDC website: www.edcparis.edu or to learners within the establishment.

The purpose of this privacy policy (“Policy”) is to provide you with clear and transparent information on how EDC collects and processes your personal data when you use the services provided by EDC, both within its establishments and online: www.edcparis.edu.

This Policy is also intended to inform you of your rights regarding your personal data. It is therefore important that you familiarize yourself with it, as well as our Cookie Policy, and any other specific information that we may communicate to you from time to time, when we collect or process personal data concerning you. This Policy supplements these other information notices and is not intended to replace them.

Who is responsible for processing your data?

EDC, registered under SIRET number 402 499 933 00032, is responsible for processing the personal data that you provide via the various paper or dematerialized forms present on the EDC websites, information that you communicate by phone, email, sms or by through one of our paper forms, data obtained as a result of the relationship we have with you and information resulting from your browsing and consumption habits.

EDC is established at 74-80, rue Roque de Fillol 92800 Puteaux, you can contact it by email at the aforementioned address or by email at the following email address: rgpd@planetaformation.fr

fr In this Policy, the terms “EDC”, “we”, “our”, “our” refer to EDC.

Who is responsible for processing your data?

EDC, registered under SIRET number 402 499 933 00024, is responsible for processing the personal data that you provide via the various paper or dematerialized forms present on the EDC websites, information that you communicate by phone, email, sms or by through one of our paper forms, data obtained as a result of the relationship we have with you and information resulting from your browsing and consumption habits.

EDC is established at 74-80, rue Roque de Fillol 92800 Puteaux, you can contact it by email at the aforementioned address or by email at the following email address: rgpd@planetaformation.fr In this Policy, the terms “EDC”, “we”, “our”, “our” refer to EDC.

What is the nature of the Data collected?

DAs part of the provision of our services, EDC may need to collect and process personal data concerning you.

Your Personal Data may be collected when:

enrolling a learner in an EDC-delivered Program;
requesting contacts, in particular to receive information on the Programs and services provided by EDC;creating a Business Profile with EDC; via the various forms on the EDC websites;
via the various forms on the EDC websites;
you subscribe to our newsletter;
communicating information provided by phone, mail, email or through one of our paper forms;
assisting Forums, Master classes, fairs, via computerized or paper forms filled out by a prospect or an EDC learner;
during the execution of the relationship we have with you; the use of our website.

EDC may collect your Data directly or indirectly, through other entities of the Planeta Group.

The following categories of personal data concerning you may be collected:

Identity data: name, first names, nationality, telephone, email, postal address, date of birth, country of residence, identity photo, possible visa application;
Professional data: level of study and area of initial training, diplomas obtained, professional experiences and addresses of the various employers in which these professional experiences were acquired, data relating to your skills and areas of interest;
Financial data, including bank details, related to the payment of registrations and scholarship applications, or financing agreements for continuing education;
Data relating to comments / questions ccollected during the pre-contractual or contractual relationship with EDC;
Login details : IP address, technical and location information generated through the use of our websites and applications: IP address, technical and location information generated through the use of our websites and applications:
Cookies :please refer to our Cookies Policy for more information

This data is collected based on the services you use and the relationship you have with us.

When we need to collect personal data about you (under a legal obligation or a contract that we have signed with you, or that we intend to sign with you) and you do not provide such personal data when requested, we may not be able to provide you with the services you want. In the context of the various forms on the EDC website, the mandatory nature of the personal data to be provided is indicated to you during collection by asterisks.

When you provide personal data concerning yourself, you agree to communicate information that is accurate and does not prejudice the interests or rights of third parties.

What is the purpose of processing your personal data?

The purpose of the processing corresponds to the objective pursued by the use of your data.

In the event that we wish to use your data for purposes other than those for which your data was initially collected, we undertake to inform you in advance and, if applicable, to obtain your consent, if this is necessary for any new purpose. EDC collects your personal data for the following purposes:

Management of the commercial relationship with the learner and, if necessary, his legal representative (including the follow-up of the learner’s application, admitted or not, registration and follow-up of the learner’s training on an administrative level, academic and financial);
Management and collection of unpaid invoices;
Litigation management;
Organization of statistical surveys, in particular for the Ministry of Higher Education and Research, organizations publishing rankings for which EDC must produce statistics or respond to surveys in accordance with the current legislation;
Video surveillance to ensure the safety of learners, staff, stakeholders and EDC premises;
Improved navigation on the EDC website;
Participation of the learner in the networks of former “Alumni” of EDC;
Creation of a Commercial Profile to carry out a Commercial Prospecting;
Promotion of EDC and the programs EDC delivers.

Use of your data for commercial prospecting purposes

EDC will process your personal data in order to offer you its products and various services related to the training courses EDC provides.

EDC may also use your data to send you commercial communications about products and services similar to those you have purchased from us. Our communications may be by mail, telephone, sms, in person and / or email, throughout the duration of your training and for a period not exceeding 3 years from the end of our commercial relationship.

Beyond this term, we undertake to seek your consent in order to authorize us to continue to send you our commercial communications on products and services similar to those that you have subscribed to with us.

Subject to your express consent, EDC may create a “Commercial Profile”:

This commercial profile will be compiled from the information and personal data that you have provided to us directly or indirectly on the basis of the information obtained with regard to your consumption and browsing habits. This information and personal data may also be collected from third parties through various social networks (in particular when you log in using identifiers specific to these social networks).

In this case, we may send you commercial communications about our products and services or those of third-party companies.

In addition, subject to your express consent, we may communicate your personal data and your “commercial profile”:

to all Planeta Group entities so that they can also create a commercial profile and send you personalized commercial communications about their products and / or services similar to those subscribed to with EDC and those of third-party companies.

You can consult the list of Planeta Group entities on the following link: https://www.planeta.es/en/who-we-are . These entities carry out their activities in the publishing, training, culture, leisure, fashion, textiles, insurance, consumer goods and jewelry sectors.

The prospective offer of own products and services and / or third-party companies as well as the creation of commercial profiles and the transfer of these profiles and your personal data to companies belonging to the Planeta Group constitute additional processing operations based on consent which you are asked, without the withdrawal of this consent conditioning the maintenance of your relationship with us.

In any case, the third-party companies outside the Planeta Group that are the subject of the commercial communications that, if applicable, you will receive from us, will be companies that carry out their activity in the same sectors as those of the companies of the Planeta Group. and which have been indicated above, or in the telecommunications, banking, finance, travel, technology and legal sectors.

How long will your data be kept?

EDC will keep personal data for the time necessary to pursue the processing purposes, and / or to comply with legal and regulatory obligations, and / or to establish, defend or exercise legal rights.

During this period, EDC takes all the necessary precautions, with regard to the nature of the data and the risks presented by the processing, to maintain its confidentiality and security and in particular to prevent the data from being distorted, damaged, or that third parties not. authorized access (physical protection of premises, authentication procedures for persons accessing data with personal and secure access via confidential usernames and passwords, secure https protocol, logging and traceability of connections, encryption of certain data, etc.).

Once the services have been rendered, EDC will delete the user’s personal data with the exception of personal data which must be kept to allow EDC to comply with a legal or regulatory obligation, and / or to find, defend or exercise legal rights, in accordance with the rules of civil and commercial prescriptions.

The table summarizes the reasons for which we process your data, the legal basis for this processing as well as the associated retention periods:

Purposes for which we process your data	Legal basis for processing	Duration of conservation
For non-learner EDC users The implementation of prospecting and advertising operations by e-mail relating to programs, activities and events organized by EDC as well as the provision of any information on the programs provided by EDC and support in the various procedures, in particular those that may lead to a enrollment in a program.	Consent of the concerned person	3 years after the last contact
For EDC learners: The implementation of prospecting and advertising operations by email, relating to programs, activities and events organized by EDC	Legitimate interest	3 years after the end of the training
EDC Newsletter Subscription	Consent of the person concerned	For the duration of the subscription and until the unsubscription of the person concerned for the newsletter
Management of the application of the student not admitted or withdrawn	Pre-contractual performance	3 years after the date of application in the event of non-admission or withdrawal
Management of the application of the admitted learner	Contractual execution	For the duration of the training and up to 3 years after the completion of the Training Cycle
Access to EDC’s intranet / ENT and where applicable, access to application resources and digital documentation.	Contractual execution	For the duration of the training then deletion of data at the end of the training
Administrative and academic follow-up of the learner’s training.	Contractual execution	For the duration of the training and up to 5 years after the end of the training for training contracts During the entire training period and up to 50 years for the issuance of diplomas and duplicates
Financial monitoring of the learner.	Compliance with legal obligations	For the duration of the training and up to 10 years from the end of the training for invoices
Management of unpaid invoices and disputes	Contractual execution	10 years from the end of the dispute related to unpaid bills
Communication of data to companies, Partners and / or other entities of the Planeta Group	Consent of the person concerned	For the duration of the training and up to 3 years after the end of the training or renewal of consent
If necessary, assist the learner in the procedure for obtaining financial grants	Contractual execution	For the duration of the training and up to 5 years after the end of the training
Organization of statistical surveys, in particular for the Ministry of Higher Education and Research, organizations publishing rankings for which EDC must produce statistics or respond to surveys in accordance with the legislation in force;	Necessary for the performance of EDC’s public service mission	Unlimited duration if data anonymized
Organization of statistical surveys, in particular quality, educational surveys	Legitimate interest	Unlimited duration if data anonymized
Organization of statistical surveys including EDC classification surveys	Consent of the person concerned	Unlimited duration if data anonymized
Creation of the learner’s business profile (made up from information that you have provided to us directly or on the basis of information obtained through your consumption and browsing habits as well as that obtained through social networks)	Consent of the person concerned	For the duration of the training and up to 3 years after the end of the training or renewal of consent
Video surveillance to ensure the safety of learners, staff, responders and EDC premises	Legitimate interest	1 month after registration
Participation of the learner in the networks of former “Alumni” of EDC	Consent of the person concerned	For the duration of the training and up to 3 years after the end of the training or renewal of consent

What is the legal basis for processing your data?

The legal basis for processing your personal data is the execution and maintenance of our commercial relationship with you, compliance with a legal or regulatory obligation, legitimate interest, express consent, if any, that you have given to us. given for processing consisting of sending our own commercial communications and / or communications from third-party companies, the creation of commercial profiles and the transfer of these data and profiles for the benefit of the companies of the Planeta Group for the purposes specified in the previous paragraph “What is the purpose of processing your personal data? “

We inform you that the personal data required at the time of your registration in the user area as well as those provided by telephone, email, mail or in our paper forms, the purpose of which is not based on the collection of your consent, are strictly necessary. to formalize and manage our relationship with you, so that failing to provide us with such information, we will not be able to maintain that relationship.

As we indicated to you previously, the prospective offer of own products and services and / or third-party companies as well as the creation of commercial profiles and the transfer of these profiles and your personal data to companies belonging to the Planeta Group constitute additional processing operations based on the consent requested from you, without the withdrawal of this consent conditioning the maintenance of your relationship with us.

To which recipients are we likely to communicate your data?

EDC strives to provide you with the best possible services, and as such may share your data:

Internally:

A limited number of people and departments authorized within EDC (namely all employees working in the communications, administrative, logistics and IT departments, responsible in particular for facilitating and managing customer relations;

To third parties:

EDC Alumni Association;
The Passerelle Association, organizer of the Concours Grande École;
Organizations linked to student life such as Cnous, Crous, student mutual societies, Ile de France region;
Official bodies (in particular the Ministry of Higher Education and Research, Education, Labor, among others, skills operators – OPCO and / or France Compétences, the Rectorate, the Conférence des Grandes Ecoles), Lfunding organizations in the field of vocational training (OPCO type);
The body in charge of the national directory of professional certifications (France Compétences);
Companies in which the learner is likely to do an internship or any other work-study training;
Higher education establishments located in France or abroad as part of a partnership or learner mobility path;
IT service providers and other third party providers providing services to EDC;
Bodies in charge of conducting EDC classifications, whether or not meeting EDC’s legal obligation;

– To the various entities of the Planeta Group;

Transfer of Personal Data outside the European Union

Your data may be transferred to a country outside the territory of the European Economic Area (EEA), in particular if you decide to participate in international exchange programs. EDC ensures that no transfer of personal data is made by itself or by its partners or subcontractors to a country located outside the EEA or to an international organization, in the absence of a decision adequacy provided by the European Commission or the establishment of appropriate and adequate guarantees to ensure the security and protection of personal data.

We inform you that EDC transfers your personal data to its service provider located in Canada who has put in place the appropriate data protection guarantees.

What are your rights when you provide us with your data?

In accordance with the Data Protection Act of 6 January 1978 as amended and articles 15 et seq. Of Regulation (EU) 2016/679 relating to the protection of personal data, you have the following rights over your data: right of access, right of rectification, right of erasure (right to be forgotten), right of opposition to the processing of your data, right to limitation of processing and right to portability.

You can also withdraw your consent at any time and at no cost. You also have the option of defining guidelines for the retention, erasure and communication of your personal data after your death.

In the event of a breach of the above provisions, you have the right to lodge a complaint with the competent supervisory authority (in France, the CNIL: www.cnil.fr).

How to exercise your rights?

For the exercise of these rights, it is advisable to indicate to us your contact details (last name, first name, email address that you have communicated to us) and a legitimate reason when this is required by law (in particular in the event of opposition to the processing. ).

Please note that if the information you provide to us does not allow us to confirm your identity or if a reasonable doubt persists, we may ask you to provide us with additional information or documents.

To exercise your rights, please send your RAR mail to the following address EDC Paris Business School, 74-80, rue Roque de Fillol 92800 Puteaux or to the following email address rgpd@planetaformation.fr.

You can lodge a complaint with a supervisory authority and have the right to legal recourse if you believe that your rights have been violated or if the supervisory authority does not follow up on your complaint.

In accordance with Article 6-II of the Law of 21 June 2004 on Confidence in the Digital Economy, data which may allow your identification may be communicated to the judicial authority when it so requires.

What security measures do we implement to protect your data?

We take the necessary steps to ensure that your personal data collected via the Site is not lost, diverted, viewed, modified or disclosed by unauthorized third parties.

To do this, we have put in place technical measures (such as firewalls) to protect your data against unlawful or accidental destruction, modification or loss, misuse and access, modification or disclosure. unauthorized.

In addition, organizational measures (such as data access authorization management systems, etc.) make it possible to preserve the confidentiality of your data. Thus, access to your personal data is strictly limited to EDC staff, expressly authorized, and to our partners and subcontractors, themselves acting according to our instructions and in accordance with our contractual provisions and applicable legislation.

Update of the Policy

We may need to revise this Policy. We ensure that the most recent version is published on the Website: www.edcparis.edu. When material changes are made to the Policy, we will notify you by posting a notice online and / or at our premises, or by sending you an email within a reasonable period of time prior to its entry into force.